CVE-2026-106173
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via specially cra
Exploited
Not listed
EPSS
0.004
36.1th percentile
Discovered by
Vendor
Vendor advisory acknowledgement
Published
Oct 13, 2026
Assigned by fortinet
Description
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via specially crafted packets.
Weakness: CWE-22
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Fortinet | FortiSIEM | SIEM & Log Management | cna-assigner |
Vendor-reported products (1)
- Fortinet · FortiSIEM
Credit
Internally discovered and reported by Gwendal Guégniaud of Fortinet Product Security team.
Vendor remediation
Upgrade to upcoming FortiSIEMCloud version 25.4.1 or above Upgrade to FortiSOC version 26.2.2 or above Upgrade to FortiSIEM version 7.6.0 or above Upgrade to FortiSIEM version 7.5.1 or above